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REMARKS 

The Office Action and the cited references have been carefully reviewed. Claims 1-21 
remain pending, are rejected and are at issue herein. Claim 7 has been amended to correct the 
antecedent basis of the limitation "batch account." This amendment does not narrow the scope of 
the claim. 

35 U.S.C. §112 Rejection 

Claim 7 has been rejected under 35 U.S.C §1 12, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which application regards 
as the invention. The Office Action states that there is insufficient antecedent basis for the 
limitation "the batch account" in line 2 of the claim. The antecedent basis has been corrected. 
This amendment does not change the scope of the claim. It is respectfully requested that the 3 5 
U.S.C. 112 rejection of claim 7 be withdrawn. 

35 U.S.C §102 Rejections 

It is axiomatic in the patent law that to reject a claim under 35 U.S.C. §102, each and 
every limitation must be found, expressly or inherently, in a single reference and arranged as 
required by the claims such that the reference discloses the identical invention. See MPEP § 
2131. Anticipation is not established if in reading a claim on something disclosed in a reference 
it is necessary to pick, choose, and combine various portions of the disclosure not directly related 
to each other by the teachings of the reference. See Ex parte Beuther, 71 USPQ2d 1313 
(BdPatApp&Int 2003), citing In reArkley, 172 USPQ 524, 526 (CCPA 1972). A reference 
applied as anticipatory of the claimed invention under 35 U.S.C. §102 must be enabling so as to 
place one of ordinary skill in the art in possession of the claimed invention. See Akzo N.V. v. 
United States Int'l Trade Commission. 808 F.2d 1471, 1479, 1 USPQ2d 1241, 1245 (Fed. Cir. 
1986) cert, denied, 482 U.S. 909, (1987); In re Spada. 91 1 F.2d 705, 708, 15 USPQ2d 1655, 
1657 (Fed. Cir. 1990). 

Claims 1, 2, 5, 8, 9, 17, 19, and 20 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Carter et al (U.S. Patent 742,1 14). This ground of rejection is respectfully 
traversed. Reconsideration of these rejections in view of the following comments is respectfully 
solicited. 
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Claim 1 requires, inter alia, receiving a request for network account credentials from an 
originating account associated with an unpublished object at a dispatch associated with a 
published object, the request including identification of the unpublished object associated with 
the originating account; authenticating the originating account at the dispatch; and sending an 
emblem for a network account to the originating account to the unpublished object associated 
with the originating account, the emblem having the identification that was included with the 
request. 

As defined in the instant application, the dispatch determines what tasks and/or jobs 
should be done and assigns the available resources, such as an originating account or an agent, to 
accomplish the task/job. The dispatch also sends network account credentials for the originating 
account or agent to access the network to complete a task/job assigned to the originating account 
or agent. An account is defined as an established relationship between a user and a computer, 
network, or information service. Examples of an account include network accounts, local 
accounts, machine accounts, and the like. An originating account is defined as an account that 
originates a request. The originating accounts are associated with unpublished objects, which are 
objects that are not globally known and are only accessible by accounts that know the objects 1 
identities. An agent is an account that is capable of being proxy logged onto by another account. 
An originating account receives agent account credentials that enable the originator to 
impersonate the agent account to access resources in which the agent account has permission to 
access and which the originator does not have permission to access. Network account 
credentials are the credentials that allow the originating account to access the network. 

If an originating account does not have adequate resources to complete a task, it needs to 
access resources in other accounts. Gaining access to accounts that require account credentials 
(e.g., a username and password, access privileges, etc.) requires knowledge of the account 
credentials. The originating account requests credentials of network accounts that have the 
resources so that the originating account can access the resources it needs to complete the task. 
The originating account sends a request for the network account credentials to the dispatch. 
Once the dispatch has authenticated the originating account, an emblem is sent for the network 
account to the originating account. Emblems are defined as objects in which network account 
credentials and access privileges are securely transmitted. An emblem also has the identification 
that was included in the request. 

The Office Action states that the Distributed Deputization Point (DDP) of Carter '1 14 is a 
dispatch (and refers to column 3, lines 30-31 of Carter '1 14) and that the DDP sends an emblem 
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for a network account to the originating account (and refers to column 9, lines 32-41 of Carter 
•114). 

Carter '114 teaches that the function of the DDP of Carter '1 14 is to delegate rights of a 
requesting user to a deputy (see column3, lines 21-26 of Carter ! 1 14). The permissions granted 
to the deputy must be the same as, or a proper subset of, the permissions held by the user (see 
column 4, lines 6-9 of Carter '114). A requesting user can have zero or more deputies and each 
deputy may have zero or more individually deputized functions or deputies (see column 4, lines 
30-35 of Carter '114). A requesting user sends in an authentication request to a DPP and 
receives an authentication response if the user is authenticated, (see column 8, lines 19-57 of 
Carter '114) Once authenticated, the requesting user sends the DPP a deputy credential request 
that either identifies a deputy or contains the public key of the proposed deputy. If the user 
identifies the deputy, the deputy credential request contains the private key of the proposed 
deputy encrypted with the user's public key and a user credential which identifies the user and 
proves it is authorized to create deputies (see column 3, lines 54-65 of Carter '114, column 9, 
lines 4-58 of Carter' 11 4). 

From the foregoing it can be seen that column 3, lines 30-3 1 of Carter '1 14 do not teach a 
dispatch; that column 8, lines 19-33 of Carter '114 and column 8, line 62 to column 9, lines 17 of 
Carter 1 1 14 do not teach receiving a request for network account credentials from an originating 
account at a dispatch; that column 9, lines 32-41 do not teach the step of sending an emblem for 
a network account to an originating account. 

Carter '114 has been thoroughly reviewed and no teaching or suggestion could be found 
of receiving a request for network account credentials from an originating account associated 
with an unpublished object at a dispatch associated with a published object, the request including 
identification of the unpublished object associated with the originating account; authenticating 
the originating account at the dispatch; and sending an emblem for a network account to the 
originating account to the unpublished object associated with the originating account, the 
emblem having the identification that was included with the request as required by claim 1 . 

From the foregoing, it is respectfully submitted that Carter '114 does not teach or suggest 
all of the elements of claim 1 and therefore does not anticipate claim 1. It is therefore 
respectfully requested that the Examiner withdraw the rejection of claim 1. 

Claims 2, 5, 8, and 9 depend from claim 1 and are believed to be patentable for the same 
reasons set forth for claim 1 . 
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With respect to claims 2 and 5, the Office Action states that column 9, lines 4-17 and 35- 
39 of Carter f l 14 teach the request is unencrypted and the emblem is encrypted. As previously 
discussed, an emblem is an object in which network account credentials and access privileges are 
securely transmitted. Carter 1 1 14 at column 9, lines 4-17 and 35-39 teaches that the deputy 
credential request contains the private key of the proposed deputy encrypted with the user's 
public key and a user credential which identifies the user and proves it is authorized to create 
deputies. It is respectfully submitted that a private key of a proposed deputy and a public key of 
a user or a user credential as defined by Carter '1 14 are not network account credentials and are 
therefore not an emblem. No teaching or suggestion could be found in Carter '1 14 of an emblem. 

With respect to claim 8, as previously discussed an agent is an account that is capable of 
being proxy logged onto by another account. An originating account receives agent account 
credentials that enable the originator to impersonate the agent account to access resources in 
which the agent account has permission to access and which the originator does not have 
permission to access. Carter '114 teaches that a user can delegate its rights to a deputy. Column 
8, line 62 to column 9, lines 17 and column 10, lines 22-32 of Carter '114 teach some of the steps 
of deputizing a deputy. The permissions granted to the deputy must be the same as, or a proper 
subset of, the permissions held by the user. Clearly, these steps do not teach or suggest enabling 
the originating account to obtain permissions which it does not have by receiving an emblem for 
the agent account of an agent. 

With respect to claim 9, no teaching or suggestion could be found in Carter '1 14 of an 
agent account (see the above discussion with respect to claim 8). No teaching or suggestion 
could be found in Carter '1 14 to proxy log on to an agent, and remoting the agent account to the 
originating account upon proxy log on to the agent account such that the emblem comprises an 
emblem for the agent account. 

Independent claim 17 requires, inter alia, a dispatch designed to field requests for 
network account credentials from a plurality of accounts, and to satisfy each request for network 
account credentials from an originating account by proxy logging onto an account capable of 
being proxy logged onto such that credentials for the account are remoted back to the originating 
account as the network account credentials requested. 

As previously described, Carter '114 teaches how a user can deputize individual 
functions, agents and/or other entities as deputies. The user account sends an authentication 
request to a DPP and receives an authentication response if the user account is authenticated. 
Once authenticated, the requesting user account sends the DPP a deputy credential request that 
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either identifies a deputy account or contains the public key of the proposed deputy account. 
Deputies of a principal (e.g., a user account) can be given certain access and permission to 
network resources without the principal being present to authenticate all their requests. 

The user account clearly does not request network credentials from the DPP or receive 
credentials for a proxy account when requesting network credentials as claim 17 requires. No 
teaching or suggestion could be found in Carter '1 14 of a dispatch designed to field requests for 
network account credentials from a plurality of accounts, and to satisfy each request for network 
account credentials from an originating account by proxy logging onto an account capable of 
being proxy logged onto such that credentials for the account are remoted back to the originating 
account as the network account credentials requested. It is therefore respectfully submitted that 
Carter '114 does not teach or suggest all of the limitations of claim 1 7. In view of the foregoing, 
it is respectfully requested that the rejection of claim 17 be withdrawn. 

Claims 19 and 20 depend from claim 17 and are believed to be patentable for the same 
reasons set forth above for claim 17. With respect to claim 19, as previously indicated, the DPP 
of Carter '114 that the Office Action states is a dispatch does not provide network account 
credentials. Carter '114 therefore cannot satisfy a request for network account credentials from 
an originating account only upon first authenticating the originating account. In view of the 
foregoing, it is respectfully requested that the rejection of claims 19 and 20 be withdrawn. 

35 U.S.C. §103 Rejections 

To establish a prima facie case of obviousness, there must be some suggestion or 
motivation, either in the references themselves or in the knowledge generally available to one 
skilled in the art, to modify the reference or combine teachings. Any proposed modification 
cannot render the prior art unsatisfactory for its intended purpose or change the principle of 
operation of a reference. There must be a reasonable expectation of success and the prior art 
references must teach or suggest all of the claim limitations. See M.P.E.P. 2143. Conclusory 
statements cannot be relied on when dealing with particular combinations of prior art and 
specific claims. The rationale for combining references must be put forth. In re Lee, 61 
U.S.P.Q.2d 1430, 1433. The Examiner can satisfy the burden of showing obviousness of the 
combination "only by showing some objective teaching in the prior art or that knowledge 
generally available to one of ordinary skill in the art would lead that individual to combine the 
relevant teachings of the references." 
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Claims 3, 4, and 21 have been rejected under 35 U.S.C. §103(a) as being unpatentable over 
Carter f l 14. This ground of rejection is respectfully traversed. Reconsideration of these rejections 
in view of the following comments is respectfully solicited. 

Claims 3 and 4 depend from claim 1 and are believed to be patentable for the same reasons 
set forth above for claim 1 . Claim 2 1 depends from claim 20, which depends from claim 1 7 and is 
believed to be patentable for the same reasons set forth above for claims 1 7 and 20. It is therefore 
respectfully requested that the rejection of claims 3, 4 and 21 be withdrawn. 

Claim 10 has been rejected under 35 U.S.C. §103(a) as being unpatentable over Carter ! 1 14. 
This ground of rejection is respectfully traversed. Reconsideration of these rejections in view of the 
following comments is respectfully solicited. 

Claim 10 depends from claim 1 and is believed to be patentable for the same reasons set 
forth above for claim 1 . It is therefore respectfully requested that the rejection of claim 10 be 
withdrawn. 

Claims 6, 7, 11-16, and 18 have been rejected under 35 U.S.C. §103(a) as being 
unpatentable over Carter '1 14, and further in view of Hoffman et al. (U.S. Patent 5,613,012). This 
ground of rejection is respectfully traversed. Reconsideration of these rejections in view of the 
following comments is respectfully solicited. 

As previously indicated, the dispatch of the instant invention determines what tasks 
and/or jobs should be done and assigns the available resources, such as an originating account or 
an agent, to accomplish the task/job. The dispatch also sends network account credentials for the 
originating account or agent to access the network to complete a task/job assigned to the 
originating account or agent. An account is defined as an established relationship between a user 
and a computer, network, or information service. Examples of an account include network 
accounts, local accounts, machine accounts, and the like. An originating account is defined as an 
account that originates a request. The originating accounts are associated with unpublished 
objects, which are objects that are not globally known and are only accessible by accounts that 
know the objects' identities. 

If an originating account does not have adequate resources to complete a task, it needs to 
access resources in other accounts. Gaining access to accounts that require account credentials 
(e.g., a username and password, access privileges, etc.) requires knowledge of the account 
credentials. The originating account requests credentials of network accounts that have the 
resources so that the originating account can access the resources it needs to complete the task. 
The originating account sends a request for the network account credentials to the dispatch. 
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Once the dispatch has authenticated the originating account, an emblem is sent for the network 
account to the originating account. Emblems are defined as objects in which network account 
credentials and access privileges are securely transmitted. An emblem also has the identification 
that was included in the request. If the originating account has been assigned a batch job to 
execute, the dispatch returns the credentials of its batch account after authorizing the request for 
account credentials from the originating account. 

With respect to the stated reason for combining the references, the Examiner is using a 
statement from Hoffman '012 as the stated reason to combine the references. It is respectfully 
submitted that such a statement is conclusory as prohibited by In re Lee. Furthermore, the 
purpose of Hoffman '012 is to provide a tokenless, secure, reliable, safe and consistent apparatus 
and method for identifying individuals for the purpose of performing financial transactions and 
non-financial transmissions. A person of ordinary skill in the art solving the problem of 
delegating rights from a principal to a deputy (the stated purpose of Carter *1 14) would not look 
to a system that identifying individuals for the purpose of performing financial transactions and 
non-financial transmissions. 

Claims 6 and 7 depend from claim 1 and are believed to be patentable for the same reasons 
as set forth above for claim 1 . 

With respect to claim 6, as previously indicated, Carter ? 1 14 does not teach or suggest the 
method of claim 1. Hoffman '012 has been reviewed and no teaching or suggestion of the 
elements of claim 1. Furthermore, column 5, line 55 through column 40, line 1 1 of Hoffman 
? 012 teach the steps to add a financial asset account to a bank. Specifically, an individual gives 
his biometric identification number to the bank along with the accounts to be added. Once 
properly identified, the identification code and account list are forwarded to an issuer terminal 
for subsequent batch submission to the system. The issuer terminal of Hoffman '012 allows 
employees at issuing banks to submit batch asset account modification operations to the data 
processing center (DPC) in a secure and identifiable manner. An authorized individual at the 
bank instructs the issuer terminal to upload the batched account additions/deletions to the DPC. 
This is done by sending an Issuer Batch Request that is encrypted and sent to the DPC. Once 
authorized by the system, the DPC processes all the requests, keeping track of the errors as 
required. Once done, the DPC returns the individual's private code, along with an encrypted 
batch containing any errors that occurred during processing. The encrypted batch containing 
errors is clearly not credentials of the DPC or the issuer terminal. 
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From the foregoing, it can clearly be seen that column 39, line 55 through column 40, 
line 1 1 of Hoffman ! 012 do not teach or suggest remoting an emblem of a batch account of a 
dispatch. The Office Action states that Carter '114 does not teach the network account for which 
the emblem is sent from the dispatch to the originating account comprises a batch account of the 
dispatch. Therefore, neither Carter f l 14, nor Hoffman '012, singly or in combination, teach or 
suggest all of the elements of claim 6. 

With respect to claim 7, it can clearly be seen from the above that Hoffman '012 at 
column 39, line 55 through column 40, line 1 1 does not teach or suggest that sending an emblem 
for the network account to the originating account comprises remoting a batch account to the 
originating account, such that the emblem comprises an emblem for the batch account. The 
Office Action states that Carter '114 does not teach sending an emblem for the network account 
to the originating account comprises remoting a batch account to the originating account, such 
that the emblem comprises an emblem for the batch account. No suggestion could be found in 
Carter f l 14 of sending an emblem for the network account to the originating account comprises 
remoting a batch account to the originating account, such that the emblem comprises an emblem 
for the batch account. Therefore, neither Carter '114 nor Hoffman '012 teach or suggest, singly 
or in combination, all of the elements of claim 7. 

In view of the foregoing, it is respectfully requested that the rejection of claims 6 and 7 
be withdrawn. 

Independent claim 1 1 requires, inter alia, receiving an unencrypted request for network 
account credentials from an originating account at a dispatch and transmitting an emblem 
including network account credentials for one of the agent account and a batch account back to 
the originating account to satisfy the request for network account credentials sent from the 
originating account. 

The Office Action states that Carter ! 1 14 teaches all of the elements of claim 1 1 except 
transmitting an emblem including a batch account and that Hoffman '012 at column 39 line 55 to 
column 40, line 1 1 teaches transmitting an emblem including a batch account. 

As previously described, Carter '114 does not teach or suggest receiving a request for 
network account credentials or transmitting an emblem including network account credentials for 
an agent account. No teaching or suggestion could be found in Hoffman '012 of receiving a 
request for network account credentials or transmitting an emblem including network account 
credentials for an agent account. As previously described, column 39, line 55 to column 40, line 
1 1 of Hoffman '012 teaches sending an encrypted batch containing errors, which are clearly not 
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credentials of the DPC or the issuer terminal. Therefore, Hoffman '012 does not teach or suggest 
transmitting an emblem including a batch account. 

From the foregoing, it is therefore respectfully submitted that neither Carter '114 nor 
Hoffman '012, singly or in combination, teach or suggest all of the limitations of claim 11. It is 
therefore respectfully requested that the rejection of claim 1 1 be withdrawn. 

Claims 12-16 depend from claim 1 1 and are believed to be patentable for the same 
reasons as set forth above for claim 1 1. It is therefore respectfully requested that the rejection of 
claims 12-16 be withdrawn. 

With respect to claim 18, it depends from claim 1 7 and is believed to be patentable for 
the same reasons as set forth above for claim 17. Furthermore, claim 18 requires, inter alia, 
returning an emblem including network account credentials for a batch account of the dispatch as 
the network account credentials requested. 

The Office Action states that Carter '114 does not teach returning an emblem including 
network account credentials for a batch account of the dispatch as the network account 
credentials requested. No suggestion could be found in Carter '1 14 of returning an emblem 
including network account credentials for a batch account of the dispatch as the network account 
credentials requested. The Office Action states thatHoffman at column 39, line 55 through 
column 40, line 1 1 teaches returning an emblem including network account credentials for a 
batch account of the dispatch as the network account credentials requested. As previously stated, 
column 39, line 55 to column 40, line 1 1 of Hoffman ! 012 teaches sending an encrypted batch 
containing errors, which are clearly not network credentials of the DPC or the issuer terminal and 
are therefore not network account credentials of a batch account of a dispatch. Therefore, 
Hoffman '012 does not teach or suggest returning an emblem including network account 
credentials for a batch account of the dispatch as the network account credentials requested. 

In view of the foregoing, it is respectfully submitted that neither Carter f l 14 nor Hoffman 
'012 teach or suggest, singly or in combination, returning an emblem including network account 
credentials for a batch account of the dispatch as the network account credentials requested. 
Therefore, neither Carter '114 nor Hoffman '012 teach or suggest, singly or in combination, all of 
the elements of claim 18. It is therefore respectfully requested that the rejection of claim 18 be 
withdrawn. 

Conclusion 
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The application is considered in good and proper form for allowance, and the Examiner is 
respectfully requested to pass this application to issue. If, in the opinion of the 
Examiner, a telephone conference would expedite the prosecution of the subject application, the 
Examiner is invited to call the undersigned attorney. 



Respectfully submitted, 




Kevin L. Wingate, RegfTCo. 38662 
LEYDIG, VOIT & MAYER, LTD. 
6815 Weaver Road, Suite 300 
Rockford, Illinois 6 1 1 1 4-80 1 8 
(815) 963-7661 (telephone) 
(815) 963-7664 (facsimile) 

Date: April 22, 2005 
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